From c37b348f9fb38811472f32bf3928f2766c004e33 Mon Sep 17 00:00:00 2001 From: "Herton R. Krzesinski" Date: Thu, 25 Nov 2021 23:02:06 +0000 Subject: [PATCH] kernel-5.14.0-21.el9 * Thu Nov 25 2021 Herton R. Krzesinski [5.14.0-21.el9] - clocksource: Increase WATCHDOG_MAX_SKEW (Waiman Long) [2017164] - x86/hpet: Use another crystalball to evaluate HPET usability (Waiman Long) [2017164] - scsi: target: Fix the pgr/alua_support_store functions (Maurizio Lombardi) [2023439] - redhat: fix typo and make the output more silent for dist-git sync (Herton R. Krzesinski) - x86: ACPI: cstate: Optimize C3 entry on AMD CPUs (David Arcari) [1998526] - scsi: lpfc: Update lpfc version to 14.0.0.3 (Dick Kennedy) [2021327] - scsi: lpfc: Allow fabric node recovery if recovery is in progress before devloss (Dick Kennedy) [2021327] - scsi: lpfc: Fix link down processing to address NULL pointer dereference (Dick Kennedy) [2021327] - scsi: lpfc: Allow PLOGI retry if previous PLOGI was aborted (Dick Kennedy) [2021327] - scsi: lpfc: Fix use-after-free in lpfc_unreg_rpi() routine (Dick Kennedy) [2021327] - scsi: lpfc: Correct sysfs reporting of loop support after SFP status change (Dick Kennedy) [2021327] - scsi: lpfc: Wait for successful restart of SLI3 adapter during host sg_reset (Dick Kennedy) [2021327] - scsi: lpfc: Revert LOG_TRACE_EVENT back to LOG_INIT prior to driver_resource_setup() (Dick Kennedy) [2021327] - x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically (Prarit Bhargava) [2021200] - ucounts: Move get_ucounts from cred_alloc_blank to key_change_session_keyring (Alexey Gladkov) [2018142] - ucounts: Proper error handling in set_cred_ucounts (Alexey Gladkov) [2018142] - ucounts: Pair inc_rlimit_ucounts with dec_rlimit_ucoutns in commit_creds (Alexey Gladkov) [2018142] - ucounts: Fix signal ucount refcounting (Alexey Gladkov) [2018142] - x86/cpu: Fix migration safety with X86_BUG_NULL_SEL (Vitaly Kuznetsov) [2016959] - ip6_gre: Revert "ip6_gre: add validation for csum_start" (Guillaume Nault) [2014993] - ip_gre: validate csum_start only on pull (Guillaume Nault) [2014993] - redhat/configs: enable KEXEC_IMAGE_VERIFY_SIG for RHEL (Coiby Xu) [1994858] - redhat/configs: enable KEXEC_SIG for aarch64 RHEL (Coiby Xu) [1994858] - kernel.spec: add bpf_testmod.ko to kselftests/bpf (Viktor Malik) [2006318 2006319] - netfilter: Add deprecation notices for xtables (Phil Sutter) [1945179] - redhat: Add mark_driver_deprecated() (Phil Sutter) [1945179] Resolves: rhbz#1945179, rhbz#1994858, rhbz#1998526, rhbz#2006318, rhbz#2006319, rhbz#2014993, rhbz#2016959, rhbz#2017164, rhbz#2018142, rhbz#2021200, rhbz#2021327, rhbz#2023439 Signed-off-by: Herton R. Krzesinski --- Makefile.rhelver | 2 +- kernel-aarch64-debug-rhel.config | 3 ++- kernel-aarch64-rhel.config | 3 ++- kernel-ppc64le-debug-rhel.config | 3 ++- kernel-ppc64le-rhel.config | 3 ++- kernel-s390x-debug-rhel.config | 1 + kernel-s390x-rhel.config | 1 + kernel-s390x-zfcpdump-rhel.config | 1 + kernel-x86_64-debug-rhel.config | 1 + kernel-x86_64-rhel.config | 1 + kernel.spec | 42 +++++++++++++++++++++++++------ sources | 6 ++--- 12 files changed, 52 insertions(+), 15 deletions(-) diff --git a/Makefile.rhelver b/Makefile.rhelver index f9934e503..da04af8c6 100644 --- a/Makefile.rhelver +++ b/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 0 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 20 +RHEL_RELEASE = 21 # # Early y+1 numbering diff --git a/kernel-aarch64-debug-rhel.config b/kernel-aarch64-debug-rhel.config index 4eb6c3b2d..dbdff204b 100644 --- a/kernel-aarch64-debug-rhel.config +++ b/kernel-aarch64-debug-rhel.config @@ -2727,7 +2727,8 @@ CONFIG_KERNEL_HEADER_TEST=y # CONFIG_KERNEL_XZ is not set # CONFIG_KERNEL_ZSTD is not set CONFIG_KEXEC_FILE=y -# CONFIG_KEXEC_SIG is not set +CONFIG_KEXEC_IMAGE_VERIFY_SIG=y +CONFIG_KEXEC_SIG=y CONFIG_KEXEC=y # CONFIG_KEYBOARD_ADC is not set # CONFIG_KEYBOARD_ADP5588 is not set diff --git a/kernel-aarch64-rhel.config b/kernel-aarch64-rhel.config index 19b6ea4c6..23fa2792c 100644 --- a/kernel-aarch64-rhel.config +++ b/kernel-aarch64-rhel.config @@ -2707,7 +2707,8 @@ CONFIG_KERNEL_HEADER_TEST=y # CONFIG_KERNEL_XZ is not set # CONFIG_KERNEL_ZSTD is not set CONFIG_KEXEC_FILE=y -# CONFIG_KEXEC_SIG is not set +CONFIG_KEXEC_IMAGE_VERIFY_SIG=y +CONFIG_KEXEC_SIG=y CONFIG_KEXEC=y # CONFIG_KEYBOARD_ADC is not set # CONFIG_KEYBOARD_ADP5588 is not set diff --git a/kernel-ppc64le-debug-rhel.config b/kernel-ppc64le-debug-rhel.config index 14975e46c..62b1d2467 100644 --- a/kernel-ppc64le-debug-rhel.config +++ b/kernel-ppc64le-debug-rhel.config @@ -2550,7 +2550,8 @@ CONFIG_KERNEL_HEADER_TEST=y # CONFIG_KERNEL_XZ is not set # CONFIG_KERNEL_ZSTD is not set CONFIG_KEXEC_FILE=y -# CONFIG_KEXEC_SIG is not set +CONFIG_KEXEC_IMAGE_VERIFY_SIG=y +CONFIG_KEXEC_SIG=y CONFIG_KEXEC=y # CONFIG_KEYBOARD_ADC is not set # CONFIG_KEYBOARD_ADP5588 is not set diff --git a/kernel-ppc64le-rhel.config b/kernel-ppc64le-rhel.config index 32e043729..5dea0145d 100644 --- a/kernel-ppc64le-rhel.config +++ b/kernel-ppc64le-rhel.config @@ -2533,7 +2533,8 @@ CONFIG_KERNEL_HEADER_TEST=y # CONFIG_KERNEL_XZ is not set # CONFIG_KERNEL_ZSTD is not set CONFIG_KEXEC_FILE=y -# CONFIG_KEXEC_SIG is not set +CONFIG_KEXEC_IMAGE_VERIFY_SIG=y +CONFIG_KEXEC_SIG=y CONFIG_KEXEC=y # CONFIG_KEYBOARD_ADC is not set # CONFIG_KEYBOARD_ADP5588 is not set diff --git a/kernel-s390x-debug-rhel.config b/kernel-s390x-debug-rhel.config index 3b9e7b42c..1dca85ed3 100644 --- a/kernel-s390x-debug-rhel.config +++ b/kernel-s390x-debug-rhel.config @@ -2532,6 +2532,7 @@ CONFIG_KERNEL_HEADER_TEST=y # CONFIG_KERNEL_XZ is not set # CONFIG_KERNEL_ZSTD is not set CONFIG_KEXEC_FILE=y +CONFIG_KEXEC_IMAGE_VERIFY_SIG=y # CONFIG_KEXEC_SIG_FORCE is not set CONFIG_KEXEC_SIG=y CONFIG_KEXEC=y diff --git a/kernel-s390x-rhel.config b/kernel-s390x-rhel.config index 3b04f1f6f..2db9b69d7 100644 --- a/kernel-s390x-rhel.config +++ b/kernel-s390x-rhel.config @@ -2515,6 +2515,7 @@ CONFIG_KERNEL_HEADER_TEST=y # CONFIG_KERNEL_XZ is not set # CONFIG_KERNEL_ZSTD is not set CONFIG_KEXEC_FILE=y +CONFIG_KEXEC_IMAGE_VERIFY_SIG=y # CONFIG_KEXEC_SIG_FORCE is not set CONFIG_KEXEC_SIG=y CONFIG_KEXEC=y diff --git a/kernel-s390x-zfcpdump-rhel.config b/kernel-s390x-zfcpdump-rhel.config index 3a995e810..9b5a5edda 100644 --- a/kernel-s390x-zfcpdump-rhel.config +++ b/kernel-s390x-zfcpdump-rhel.config @@ -2533,6 +2533,7 @@ CONFIG_KERNEL_HEADER_TEST=y # CONFIG_KERNEL_XZ is not set # CONFIG_KERNEL_ZSTD is not set CONFIG_KEXEC_FILE=y +CONFIG_KEXEC_IMAGE_VERIFY_SIG=y # CONFIG_KEXEC_SIG_FORCE is not set # CONFIG_KEXEC_SIG is not set CONFIG_KEXEC=y diff --git a/kernel-x86_64-debug-rhel.config b/kernel-x86_64-debug-rhel.config index 3f7db66ae..0ea00ea12 100644 --- a/kernel-x86_64-debug-rhel.config +++ b/kernel-x86_64-debug-rhel.config @@ -2725,6 +2725,7 @@ CONFIG_KERNEL_HEADER_TEST=y # CONFIG_KERNEL_ZSTD is not set CONFIG_KEXEC_BZIMAGE_VERIFY_SIG=y CONFIG_KEXEC_FILE=y +CONFIG_KEXEC_IMAGE_VERIFY_SIG=y CONFIG_KEXEC_JUMP=y # CONFIG_KEXEC_SIG_FORCE is not set CONFIG_KEXEC_SIG=y diff --git a/kernel-x86_64-rhel.config b/kernel-x86_64-rhel.config index b9c1de0b2..a4981bf59 100644 --- a/kernel-x86_64-rhel.config +++ b/kernel-x86_64-rhel.config @@ -2706,6 +2706,7 @@ CONFIG_KERNEL_HEADER_TEST=y # CONFIG_KERNEL_ZSTD is not set CONFIG_KEXEC_BZIMAGE_VERIFY_SIG=y CONFIG_KEXEC_FILE=y +CONFIG_KEXEC_IMAGE_VERIFY_SIG=y CONFIG_KEXEC_JUMP=y # CONFIG_KEXEC_SIG_FORCE is not set CONFIG_KEXEC_SIG=y diff --git a/kernel.spec b/kernel.spec index 772b69bd0..d33e365b9 100755 --- a/kernel.spec +++ b/kernel.spec @@ -85,7 +85,7 @@ Summary: The Linux kernel # the --with-release option overrides this setting.) %define debugbuildsenabled 1 -%global distro_build 20 +%global distro_build 21 %if 0%{?fedora} %define secure_boot_arch x86_64 @@ -129,13 +129,13 @@ Summary: The Linux kernel %define kversion 5.14 %define rpmversion 5.14.0 -%define pkgrelease 20.el9 +%define pkgrelease 21.el9 # This is needed to do merge window version magic %define patchlevel 14 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 20%{?buildid}%{?dist} +%define specrelease 21%{?buildid}%{?dist} %define pkg_release %{specrelease} @@ -676,7 +676,7 @@ BuildRequires: lld # exact git commit you can run # # xzcat -qq ${TARBALL} | git get-tar-commit-id -Source0: linux-5.14.0-20.el9.tar.xz +Source0: linux-5.14.0-21.el9.tar.xz Source1: Makefile.rhelver @@ -1361,8 +1361,8 @@ ApplyOptionalPatch() fi } -%setup -q -n kernel-5.14.0-20.el9 -c -mv linux-5.14.0-20.el9 linux-%{KVERREL} +%setup -q -n kernel-5.14.0-21.el9 -c +mv linux-5.14.0-21.el9 linux-%{KVERREL} cd linux-%{KVERREL} cp -a %{SOURCE1} . @@ -2249,7 +2249,7 @@ for dir in bpf bpf/no_alu32 bpf/progs; do test -d $dir || continue mkdir -p %{buildroot}%{_libexecdir}/kselftests/$dir find $dir -maxdepth 1 -type f \( -executable -o -name '*.py' -o -name settings -o \ - -name 'btf_dump_test_case_*.c' -o \ + -name 'btf_dump_test_case_*.c' -o -name '*.ko' -o \ -name '*.o' -exec sh -c 'readelf -h "{}" | grep -q "^ Machine:.*BPF"' \; \) -print0 | \ xargs -0 cp -t %{buildroot}%{_libexecdir}/kselftests/$dir || true done @@ -2951,6 +2951,34 @@ fi # # %changelog +* Thu Nov 25 2021 Herton R. Krzesinski [5.14.0-21.el9] +- clocksource: Increase WATCHDOG_MAX_SKEW (Waiman Long) [2017164] +- x86/hpet: Use another crystalball to evaluate HPET usability (Waiman Long) [2017164] +- scsi: target: Fix the pgr/alua_support_store functions (Maurizio Lombardi) [2023439] +- redhat: fix typo and make the output more silent for dist-git sync (Herton R. Krzesinski) +- x86: ACPI: cstate: Optimize C3 entry on AMD CPUs (David Arcari) [1998526] +- scsi: lpfc: Update lpfc version to 14.0.0.3 (Dick Kennedy) [2021327] +- scsi: lpfc: Allow fabric node recovery if recovery is in progress before devloss (Dick Kennedy) [2021327] +- scsi: lpfc: Fix link down processing to address NULL pointer dereference (Dick Kennedy) [2021327] +- scsi: lpfc: Allow PLOGI retry if previous PLOGI was aborted (Dick Kennedy) [2021327] +- scsi: lpfc: Fix use-after-free in lpfc_unreg_rpi() routine (Dick Kennedy) [2021327] +- scsi: lpfc: Correct sysfs reporting of loop support after SFP status change (Dick Kennedy) [2021327] +- scsi: lpfc: Wait for successful restart of SLI3 adapter during host sg_reset (Dick Kennedy) [2021327] +- scsi: lpfc: Revert LOG_TRACE_EVENT back to LOG_INIT prior to driver_resource_setup() (Dick Kennedy) [2021327] +- x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically (Prarit Bhargava) [2021200] +- ucounts: Move get_ucounts from cred_alloc_blank to key_change_session_keyring (Alexey Gladkov) [2018142] +- ucounts: Proper error handling in set_cred_ucounts (Alexey Gladkov) [2018142] +- ucounts: Pair inc_rlimit_ucounts with dec_rlimit_ucoutns in commit_creds (Alexey Gladkov) [2018142] +- ucounts: Fix signal ucount refcounting (Alexey Gladkov) [2018142] +- x86/cpu: Fix migration safety with X86_BUG_NULL_SEL (Vitaly Kuznetsov) [2016959] +- ip6_gre: Revert "ip6_gre: add validation for csum_start" (Guillaume Nault) [2014993] +- ip_gre: validate csum_start only on pull (Guillaume Nault) [2014993] +- redhat/configs: enable KEXEC_IMAGE_VERIFY_SIG for RHEL (Coiby Xu) [1994858] +- redhat/configs: enable KEXEC_SIG for aarch64 RHEL (Coiby Xu) [1994858] +- kernel.spec: add bpf_testmod.ko to kselftests/bpf (Viktor Malik) [2006318 2006319] +- netfilter: Add deprecation notices for xtables (Phil Sutter) [1945179] +- redhat: Add mark_driver_deprecated() (Phil Sutter) [1945179] + * Tue Nov 23 2021 Herton R. Krzesinski [5.14.0-20.el9] - powerpc/svm: Don't issue ultracalls if !mem_encrypt_active() (Herton R. Krzesinski) [2025186] diff --git a/sources b/sources index cbde28931..08e6c119e 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ -SHA512 (linux-5.14.0-20.el9.tar.xz) = 264254ff3087e3076dba91e79c18856aefc8b9c4a1ed667e35adad3d782f879c9cbe29b5f0c6f5b8f2bb5c1ca8208c669c3c2f796c3998fa206c7b5744ae78b6 -SHA512 (kernel-abi-stablelists-5.14.0-20.tar.bz2) = 0729c923079f2479a452e0bcaf7e7fc92ffd62c490eefcc023bf8ebe8fccfa015bbda9c83582c79a27106c9abab118618af4ab4183e813d0e0ccd6c38886175f -SHA512 (kernel-kabi-dw-5.14.0-20.tar.bz2) = 4de5f924ddd4ccc110d24a17ff66c9b08ba17e6648afc0f352386ca1a2db3fbe2fc571643a17cd4be0b4143ba2806e7d9d214e0d5a9712d47ece6981b8dea24e +SHA512 (linux-5.14.0-21.el9.tar.xz) = 066403f744132c5ad93badd9598cf3ed63e659507bdca45ed5a1406a7a872ce2f9c94be2b5705a6484e5d52160b5d34c4c4069f00c28966296abaedd1e57c58b +SHA512 (kernel-abi-stablelists-5.14.0-21.tar.bz2) = e3df1d1ec60daab76ec610ba42801b1837defbf9c55f728eb564eca2fa925929158fe96235722c43af14eb6d418f813e4751ec63f9da3fd3cc99137d5c19e963 +SHA512 (kernel-kabi-dw-5.14.0-21.tar.bz2) = ac1d1e857e90e9793948d47e26e754ce4662a52047b4dde8db7536cdb0ec7d365b09cfd12307e47d99f1be05a69f9a8ae9c11eece2ac55a85d94e14882fb3156